CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1753374348)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1753374348 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 10.0 [CIQ] Security Update: python3-requests (crlsa-2025_13604)

The Rocky Linux 10.0 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202513604 advisory. requests: Requests vulnerable to .netrc credentials leak via malicious URLs CVE-2024-47081 Tenable has extracted the preceding description block directly from t...

CentOS Linux 7.9 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-demos / freetype-devel (ciqsa-2026_0661)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260661 advisory. This advisory aggregates security fixes for the freetype SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-27363. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc Multiple Vulnerabilities (ciqsa-2026_0422)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260422 advisory. This advisory aggregates security fixes for the glib2 SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2024-34397, CVE-2025-4373, CVE-2024-52533,...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-7.0 / aspnetcore-targeting-pack-7.0 / etc Multiple Vulnerabilities (crlsa-2024_0157)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240157 advisory. dotnet: Information Disclosure: MD.SqlClientMDS & System.data.SQLClient SDS CVE-2024-0056 dotnet: X509 Certificates - Validation Bypass across Azure...

AlmaLinux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1790834869)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790834869 advisory. - DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in...

Rocky Linux 9.4 [CIQ] Security Update: krb5-devel / krb5-libs / krb5-libs-debuginfo / krb5-pkinit / etc (ciqsa-2026_0538)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260538 advisory. This advisory aggregates security fixes for the krb5 SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-3596. Tenable has extracted the preceding description block...

Rocky Linux 8.6 [CIQ] Security Update: skopeo / skopeo-tests Multiple Vulnerabilities (ciqsa-2026_1316)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261316 advisory. This advisory aggregates security fixes for the skopeo SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...

AlmaLinux 9.6 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.6:CLSA-2026:1782721550)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782721550 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of...

AlmaLinux 9.6 [TuxCare] Security Update: libreswan (ALMALINUX9.6:CLSA-2026:1784075638)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784075638 advisory. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial o...

CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc (CENTOS7:CLSA-2025:1757666588)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757666588 advisory. - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap...

Rocky Linux 10.0 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_11332)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511332 advisory. tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2...

Rocky Linux 9 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (crlsa-2026_6301)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266301 advisory. squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling CVE-2026-33526 Squid: Squid: Denial of Service via crafted ICP traffi...

Rocky Linux 8.6 [CIQ] Security Update: NetworkManager-libreswan / NetworkManager-libreswan-debuginfo / etc (ciqsa-2026_0119)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260119 advisory. This advisory aggregates security fixes for the NetworkManager-libreswan SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-9050. Tenable has extracted the precedi...

Rocky Linux 9 [CIQ] Security Update: cups-filters / cups-filters-debuginfo / cups-filters-debugsource / etc (crlsa-2023_3423)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233423 advisory. cups-filters: remote code execution in cups-filters, beh CUPS backend CVE-2023-24805 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_8921)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268921 advisory. kernel: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit CVE-2025-39766 kernel: scsi: qla2xxx: Fix improper freeing of purex item...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2024_3783)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243783 advisory. firefox: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 firefox: IndexedDB files retained in private browsing mode CVE-2024-4767 firefox: Potential...

Rocky Linux 9 [CIQ] Security Update: plexus-utils (crlsa-2026_38796)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202638796 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (crlsa-2026_24347)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624347 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 frr: denial of service via crafted BGP UPDATE message CVE-2026-37459 Tenable has...

Rocky Linux 8.8 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0362)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260362 advisory. This advisory aggregates security fixes for the curl SRPM in CIQ LTS 8.8. It addresses 6 CVEs: CVE-2023-38546, CVE-2023-27536, CVE-2023-46218,...